CmdID / Files

comsnap.dll

COM+ Explorer MMC Snapin file version info

Library on Windows 2 known copies with hashes

Is it the real comsnap.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionCOM+ Explorer MMC Snapin

2 known copies

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\system32\comsnap.dll · signed by Microsoft Windows

750ca95929a411148dc607eda44d8b88b176017d5f47caa6bb63dea68fb540f1

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\SysWOW64\comsnap.dll · signed by Microsoft Windows

b677ba133c8f2b3f4a733fe0e805a07cac90e513573a7b2d4b8ee0beed72dfc0

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.